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A SYSTEM OPERABLE TO IDENTIFY AND ACCESS INFORMATION ABOUT A 
USER 

Technical field of the invention 
5 The present invention relates in a first aspect to a system operable to 

identify and access information about a user of a distributed communication sys- 
tem. 

In a second aspect the present invention relates to a method for identifying 
and accessing information about a user of a distributed communication system. 
10 In a third aspect the present invention relates to at least one computer 

program product for identifying and accessing information about a user of a dis- 
tributed communication system. 

Description of related art 

15 During the last years Internet has been the fastest growing media for 

communication and this expansion is expected to continue. One of the most com- 
mon means to finance content and services in the Internet is by selling advertising 
space. In traditional media, advertising has been one of the primary sources of 
revenues and effort has always been focused on maximising the results from ad- 

20 vertising. 

Internet is not different when it comes to optimising advertising campaigns 
The goal for any party serving advertisement on the Internet is to be able to ex- 
pose the correct advertisement to the Internet user in question. The problem with 
this is that it is relatively simple to be anonymous on the Internet and therefore it is 
25 normally only possible to prepare targeting of advertisement based on estimates 
given an Internet users previous visits on web-sites controlled by the advertise- 
ment serving party. 

The technology to identity Internet users available today is based on the 
use of "cookies". A cookie is a data file stored at web- browser level. This technol- 
30 ogy has some serious disadvantages. First it is very easy for the Internet user to 
turn off the function to receive cookies. Second, it is the web-browser being identi- 
fied, not the Internet user using the web-browser. 

Today there is mainly one solution to the problem of identifying an Internet 
user. This solution is used today but has limitations. This solution is based on a 
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process of log-in where the Internet user is identified by a user name and authen- 
ticated by a password. By using a log-in process it is possible to determine which 
individual is using the web-browser at a given point in time on the specific web-site 
on which the user has logged in. 
5 If it was possible to easily and safely identify an Internet user without the 

need for cookies or log-in procedures, a whole range of new possibilities should 
appear, such as the possibility to subsidise and/or charge activities or time spent 
on a specific web-site, the possibility to charge micro-amounts, or handling log-in 
without the Internet user being involved etc. 

10 

Summary 

It is an object of the present invention to solve the above mentioned prob- 
lems. The purpose of the invention is to be able to identify and access information 
about a user of a distributed communication system in real time without the users 
is intervention whenever the user implicitly or explicitly requests a service from a 
service provider on e.g. the Internet. 

According to the present invention there is provided in a first aspect a 
system operable to identify and access information about a user of a distributed 
communication system in real time without the users intervention. The system 

20 comprises at least one service device (1 08) operable to provide services to said 
user , and at least one access device operable to provide access to said distributed 
communication system. The system also comprises at least one control means 
connected to said at least one access device and to said at least one service de- 
vice. The system also comprises a to said at least one access device connected 

25 identification device operable to identify an address of a specific user, and at least 
one storage device connected to said at least one control means. The system also 
comprises a to said at least one control means connected cache means operable 
to store mappings of said addresses and identifications of said users. The service 
device sends a request for information about a user requesting a service from said 

30 service device to said control means, which control means checks if said cache 
means contains an up to date identification. If said check gives an affirmative an- 
swer said control means fetches said information from said storage device and 
sends a reply comprising said information to said service device. On the other 
hand, if said check gives a negative answer said control means sends a request 
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for a real time identification of said address to said access device, which access 
device identifies said address with the aid of said identification device and sends 
said identification to said control means, which control means fetches said infor- 
mation from said storage device, and sends a reply comprising said information to 
5 said service device. The main advantage with the system according to the present 
invention is that it makes it easy and safe to identify a user without the need for 
cookies or log-in procedures. 

Another object of the invention is to provide a method for identifying and 
accessing information about a user of a distributed communication system in real 
10 time without the users intervention, the method is performed with the aid of a sys- 
tem comprising at least one service device operable to provide services to said 
user, and at least one access device operable to provide access to said distributed 
communication system. The method comprises the following steps: 

- that a user requests a service, implicitly or explicitly from a service device; 
15 - that said service device sends a request for information about said user to a 

control means; 

- said control means checks if a cache means connected to said control means 
contains an up to date identification: 

- if said check gives an affirmative answer said control means fetches said in- 

20 formation from a to said control means connected storage device, and sends a 
reply comprising said information to said service device; and 

- if said check gives a negative answer said control means sends a request for a 
real time identification of an address of said user to said access device; 

- said access device identifies said address with the aid of a to said access de- 
15 vice connected identification device, and sends said identification to said con- 
trol means; 

- said control means fetches said information from a to said control means con- 
nected storage device, and sends a reply comprising said information to said 
service device. The main advantage with the method according to the present 

o invention is that it becomes easy and safe to identify a user without the need 
for cookies or log-in procedures. 

Another object of the invention is to provide at least one computer pro- 
gram product directly loadable into the internal memory of at least one digital com- 
puter. The at least one computer program product comprises software code por- 
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tions for performing the steps of the method according to the present invention, 
when said at least one product is/are run on said at least one computer. The main 
advantage with the computer program product(s) according to the present inven- 
tion is that it becomes easy and safe to identify a user without the need for cookies 
5 or log-in procedures. 

It should be emphasised that the term "comprises/comprising" when used 
in this specification is taken to specify the presence of stated features, steps or 
components but does not preclude the presence of one of more other features, 
integers, steps, components or groups thereof. 
10 Embodiments of the invention will now be described with a reference to 

the accompanying drawings, in which: 

Brief description of the drawings 

Figure 1 shows a block diagram of a system operable to identify and ac- 
15 cess information about a user of a distributed communication system according to 
the present invention; 

figure 2 shows another block diagram of the system in figure 1 in more 

detail; 

figure 3 shows yet another block diagram of said system in figure 1 , when 
20 said system is used in connection with the Internet; 

figure 4 is a flow chart of a method for identifying and accessing informa- 
tion about a user of a distributed communication system in real time according to 
the present invention; 

figure 5 is a flow chart of a method for updating of an internal cache 
25 means according to the present invention; 

figure 6 is a flow chart of a method for handling the situation when said 
method according to figure 4 is performed in several geographical regions; 

figure 7 is a flow chart of a method for performing a service according to 
the present invention; 

30 figure 8 shows a schematic diagram of some computer program products 

according to the present invention. 



Detailed description of embodiments 
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In figure 1 there is disclosed a block diagram of a system operable to 
identify and access information about a user of a distributed communication sys- 
tem according to the present invention. The distributed communication system can 
e.g. be the Internet, the Internet 2 or a digital TV-system, and comprises according 
5 to figure 1 three service devices 108 operable to provide services to different us- 
ers, here disclosed at 109, in the form of three different users 109. The distributed 
communication system also comprises three access devices 105a, each operable 
to provide access to said distributed communication system. The system accord- 
ing to the present invention, limited by said broken line, comprises at least one 
10 control means 1 01 ; 103, here only one is disclosed, connected to said three ac- 
cess devices 105a and to said three service devices 108. The system according to 
the resent invention also comprises at least one storage device 102; 104, here 
only one is disclosed, connected to said at least one control means 101; 103. The 
distributed communication system can also comprise at least one attach means 
15 107a, here three are disclosed, each operable to attach additional information to 
identifications. If said distributed communication system is the Internet, said serv- 
ice device 108 is an online service provider, said access device 105a is an Internet 
access provider (IAP) 105a, and said attach means 107a is an additional supplier 
107a. A service provider is in this context any party providing an Internet based 
20 service. Said control means 101; 1 03 is in this context a server 101; 1 03. 

In figure 2 there is disclosed another block diagram of the system dis- 
closed in figure 1 in more detail. The aim with this figure is to illustrate that the 
system according to the present invention can be divided into a number of geo- 
graphical regions. In figure 2 said system is divided into three different geographi- 
25 cal regions. Said division is performed based on the distance between the individ- 
ual control means 101; 103 in the system according to the present invention. In a 
fist region, encircled by the broken line, there is disclosed a central control means 
1 01 a connected to a central storage device 1 02a, two access devices 1 05a con- 
nected to said central control means 101a. In said first region there are also dis- 
30 closed two regional control means 103a connected to said central control means 
101a. Each said regional control means 103a is also connected to a regional stor- 
age device 104a. Each geographical region can also comprise a supplier means 
106a for handling a number of attach means 107a. Each attach means 107a is 
connected to said supplier means 106a and to said central control means 101a. In 
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this figure 2 there is also disclosed a second geographical region comprising a 
central control means 101b, a central storage device 102b connected to said cen- 
tral control means 101b. This region also comprises a regional control means 
103b connected to said central control means 101b. At last, said second region 
5 also comprises a regional storage device 1 04b connected to said regional control 
means 103b. As is apparent from figure 2 this second region does not comprise 
any access device, supplier means or attach means. It is noted that there can be 
more than one region comprising the same parts as in the first region. In this figure 
2 there is also disclosed a third geographical region comprising a central control 

io means 101c, a central storage device 102c connected to said central control 
means 101c. This third region also comprises a supplier means 106c and three 
attach means 107c, wherein each attach means 107c is connected to said supplier 
means 106c and to said central control means 101c. Of course there are connec- 
tions between said different regions. In figure 2 there is disclosed a connection 

is between said central control means 101a and said central control means 101b. 
There is also a connection between said central control means 101a and said re- 
gional control means 103b and a connection between said central control means 
101b and said regional control means 103a. There is also a connection between 
said supplier means 106a and said supplier means 106c. In connection with figure 

20 6 there is described the function of the system disclosed in figure 2. 

In figure 3 there is disclosed yet another block diagram of said system in 
figure 1, when said system is used in connection with the Internet. The same ref- 
erence signs in the different figures represent the same structural elements and 
are not described again. The Internet is schematically shown in the middle of the 

25 figure in the form of a "cloud". The system also comprises a first interface unit 110 
connected to said service device 108, which first interface unit 110 also is con- 
nected to two different control means 101; 103. The system also comprises a sec- 
ond interface unit 1 12 connected to said control means 101 ; 103 and to two ac- 
cess devices 105; 105a. Said control means 101; 103 are also connected to said 

30 storage device 102; 104. Said interface units can e.g. be Application programming 
Interfaces (API). The system also comprises a cache means 1 1 1 connected to 
said control means 101 ; 103, which cache means 1 1 1 is operable to store map- 
pings of said addresses and identifications for said users 109. The system also 
comprises an identification device 113 operable to identify an address of a specific 
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user 109. Said identification device 1 13 is connected to said access device 105a. 
Said identification device 1 13 is a device that finds a mapping between an address 
and an identifier for the user 109 currently using said address. This information 
may be extracted from a storage device connected to said access provider 105a, 
5 which the access provider 105a always updates with information on which address 
said access provider 105a assigns to said user 109. This storage device can e.g. 
be a data base. In connection with figure 4 there is described the function of the 
system disclosed in figure 3. 

In figure 4 there is disclosed a flow chart of a method for identifying and 

10 accessing information about a user of a distributed communication system in real 
time according to the present invention. The method is performed without the us- 
ers 109 intervention. Said method is also performed with the aid of a system, e.g. 
disclosed in figure 3, comprising at least one service device 108 operable to pro- 
vide services to said users 109, and at least one access device 105a operable to 

is provide access to said distributed communication system. The method begins at 
block 200. At block 202 the method continues with the step: that a user 109 re- 
quests a service A (see e.g. figure 3), implicitly or explicitly from a server device 
108. The method continues at block 204 with the step that said service device 108 
sends a request B, C1 for additional information about said user 109 to a control 

20 means 101 ; 103. At block 206 the method continues with the step that said control 
means 101 ; 103 checks if said cache means 111 contains an up to date identifica- 
tion. If said check gives an affirmative answer the method continues at block 208 
with the step that said control means 101; 103 fetches said information from said 
storage device 102; 104, and sends a reply comprising said information to said 

25 service device 108. Said information fetched by said control means 101; 103 is 
connected to said identification from said cache means 111. If said check gives a 
negative answer the method continues at block 210 with the step that said control 
means 101; 103 sends a request D, see e.g. figure 3, for a real time identification 
of said address of said user 109 to said access device 105a. At step 212 the 

30 method continues with the step that said access device 105a identifies said ad- 
dress with the aid of said identification device 113, and sends said identification to 
said control means 101; 103. The method continues, at block 214, with the step 
that said control means 101; 103 fetches said information from said storage device 
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102; 104, and sends a reply comprising said information to said service device 
108. The method is completed at block 216. 

The request B, se figure 3, contains the current IP-address assigned to the 
Internet user 109. The request B is forwarded by said first interface unit 1 10 to a 
5 request C1. The first interface unit 110 decides which server 101 ; 103 to send the 
request C1 to based on the geographical location of said server 101 ; 103 and the 
geographic location of said access means 105a said Internet user 109 is con- 
nected to. Said first interface unit 110 also decides whether to optimise this selec- 
tion based on speed or reliability depending on the type of the request. The sec- 

10 ond interface unit 112 selects the correct access means 105a based on the IP- 
address in the request C1 and forwards the request E1, still containing the IP- 
address assigned to the Internet user 109, to the access means 105a. The access 
means 105a identifies the IP-address in request E1 by the use of said identifica- 
tion device 113, and sends an identification back to said server 101; 103. This is 

15 illustrated in figure 3 with H1 and I. Said server 101; 103 updates said cache 

means 111 with the mapping between the IP-address in request C1 and the iden- 
tification delivered from the access means 105a. The server 101; 103 fetches in- 
formation connected to the identification delivered from said access means 105a 
from said storage device 102; 104, and sends a reply to said service device 108. 

20 This is illustrated in figure 3 with L1 and M. The server 101; 103 finally logs the re- 



in figure 5 there is disclosed a flow chart of a method for updating of an 
internal cache means according to the present invention. The method begins at 
block 240. At block 242 the method continues with the step that said server 101; 

25 103 updates said cache means 111 with the mapping between said IP-address 
and said identification for each request C1, and sends a reply (H1 and I) in corre- 
spondence thereto. The method continues at block 244 with the step that said 
server 101; 103 receives a mapping between an IP-address and an identification 
by querying said access means 105a, or directly from another server 101 ; 103 

30 when the other server 101 ; 103 has received a mapping according to step 242. 
The next step, at block 246, consists of storing said mapping in an internal cache 
means 111 together with a timestamp. This step is performed by said server 101 ; 
103. At block 248 said method continues with the step that the server 101; 103 it- 
erates through the currently stored mappings between a IP address and an identi- 



quest. 
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fication in said cache means 1 1 1 . and validates the entries if a certain time has 
elapsed since the entry was last validated according to the stored timestamp. The 
validation is performed by querying said access means 105a for an identification of 
the IP-address. At block 250 the question is asked if the IP-address is valid? An 
5 entity in said cache means 1 1 1 is valid if the access device 105a which "is the 
owner" of the address can verify that the identity still is associated with said ad- 
dress, by the use of said identification device 113. If the answer is affirmative the 
timestamp on said entry is updated as in block 252. On the contrary, if the answer 
is negative, i.e. the IP-address is invalid, the cache entry is removed as in block 

io 254. The method is completed at block 256. It is noted that the steps according to 
this figure 5 is a part of the methods according to the present invention. 

In figure 6 there is disclosed a flow chart of a method for handling the 
situation when said method according to figure 4 is performed in several geo- 
graphical regions. The method begins at block 270. At block 272 the method con- 

15 tinues with the step that said central server 101a downloads mappings between 
Internet access account information and an identifier from the access means 105a 
within a first geographic region. The downloaded mapping data is stored in said 
central storage device 102a. This can be done in real time, as soon as said access 
means 105a receives updated account information or new accounts, or on a 

20 regular basis by day or any other period of time with all new information since the 
last update. The method continues at block 274 with the step that said supplier 
server 106a downloads mappings between Internet account information and an 
identifier from said access means 105a within said first region in the same way as 
described at block 272. The supplier server 106a distributes the information to the 

25 attach means 107a in said first region. The attach means 107a attach additional 
information to the identification. Said attach means 107a sends the additional in- 
formation together with the identification to said central server 101a. It is also pos- 
sible that an attach means 107a receives information from an access means 105a 
directly, attach additional information and sends this to said central server 101a. 

30 The additional information is stored in said central storage device 102a. The next 
step, at block 276, consists of distributing, with the aid of said central server 101a, 
said mappings to said regional servers 103a and said mappings are stored in said 
regional storage device 104a. At block 278 said method continues with the step 
that said central server 101a distributes said mappings to central servers 101b in 
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other geographic regions if there are service means 108 requesting the informa- 
tion from regional servers 103b or the central server 101b in this other region. The 
distributed mappings are stored in said central storage device 102b for said other 
region. The next step, at block 280, consists of distributing, with the aid of said 
5 central server 101a, said mappings to regional servers 103b in other geographic 
regions if there are service means 108 in that region requesting the information 
from those regional servers 103b. The method is completed at block 282. It is 
noted that the steps according to this figure 6 is a part of the method according to 
the present invention. 

io In figure 7 there is disclosed a flow chart of a method for performing a 

service according to the present invention. With this service the invention can be 
used to enable a service means 108 to sponsor Internet users 109 when they visit 
the service means 108 or use services provided by said service means 108. The 
method begins at block 300. At block 302 the method continues with the step that 

15 an Internet user 109 connects A (see e.g. figure 3) to a service means 108. The 
method continues at block 304 with the step that said service means 108 makes a 
request, through said first interface unit 1 10 for a real time identification of said on- 
line Internet user 109 to check whether the Internet user 109 is allowed to get 
sponsoring. If the answer is negative, i.e. if the Internet user 109 not is allowed to 

20 be sponsored, the method continues at block 306 with the step that said service 
means 108 displays a message to the Internet user 109 explaining how the Inter- 
net user 109 can get hold of this service. If the answer on the contrary is affirma- 
tive, i.e. the Internet user 109 is allowed to be sponsored, the method continues at 
block 308 with the step that said service means 108 sends a logon request 

25 through said first interface unit 110. Said first interface unit 110 redirects the re- 
quest to a server 101; 103 with an indication of which access means 105a the 
Internet user 109 is using. The server 101 ; 103 logs the exact time the logon re- 
quest was made together with the identification of the Internet user 109, where the 
identification is derived in the same manner as previously described. At block 310 

30 the method continues with the step that said service device 108 verifies that the 
Internet user 109 is actively using the services of said service device 108 and 
sends update requests through the first interface unit 110. Said first interface unit 
1 10 redirects said request to the server 101; 103 which logs the exact time the up- 
date request was made together with the identification of the Internet user 109. 
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The next step, at block 312, consists of the following: said service device 108 
notes when the Internet user 109 is not using said services any longer and sends 
a logoff request through said first interface unit 110. Said first interface unit 110 
redirects the request to the server 101; 103, which logs the exact time the logoff 

5 request was made together with the identification of the Internet user 109. The 
method continues, at block 314, with the step that the log, on a regular basis, is 
parsed to calculate the amount of time a specific Internet user 109 has used a 
service at a specific service means 108. At block 316 the method continues with 
the step that said service means 108 will be billed for this time and said access 

10 means 105a of the corresponding Internet user 109 will be credited and will reduce 
the Internet users 109 bill with the corresponding amount. The method is com- 
pleted at block 318. It is to be noted that the steps according to this figure 7 is a 
part of the method according to the present invention. 

In this realization of the invention, information about an Internet user 109 

is is provided by one or several information suppliers 107a which all have a relation- 
ship to the information supplier 105a also being the party providing the Internet 
access to the Internet user 109. The information provided is compiled and stored 
in advance in storage (102 or 104) or compiled in real time in cooperation with the 
Internet access provider 105a. The compiled and stored information is stored in 

20 such a way that it is impossible to associate an IP-address with the stored infor- 
mation without the help of an Internet access provider 105a which also is the party 
distributing the IP-address to the Internet user 109. 

When the Internet user 109 implicitly or explicitly requests a service A from 
a online service provider 108 this online service provider 108 has the possibility to 

25 requests part of, or complete information about the Internet user 109 requesting 
the service. The online service provider 108 will post the request to a device 110 
where the device decides where to forward the request. As a result the online 
service provider 108 receive parts of, or complete information about the Internet 
user 1 09 requesting the service. 

30 The retrieved information will be used for controlling parts of, or the com- 

plete content of a service provided by the online service provider 108. The re- 
trieved information can also be used to collect statistics about requests to a spe- 
cific service provided by the online service provider 108. 
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In this realization of the invention, information about an Internet user 109 
is provided by one or several information suppliers 107a which all have a relation- 
ship to the information supplier 1 05a also being the party providing the Internet 
access to the Internet user 109. The information provided is compiled and stored 

5 in advance in storage (102 or 104) or compiled in real time in cooperation with the 
internet access provider 105a. The compiled and stored information is stored in 
such a way that it is impossible to associate an IP-address with the stored infor- 
mation without the help of an Internet access provider 105a which also is the party 
distributing the IP-address to the Internet user 109. 

io When the Internet user 109 implicitly or explicitly requests a service A from 

a online service provider 108 this online service provider 108 has the possibility to 
request a result from a matching process performed by the server (101 or 103) 
and request a match with the data retrieved given a specific Internet user 1 09 re- 
questing a service from the online service provider 108. The online service pro- 

15 vider 1 08 can also specify criteria's to match with within the request for match. 

The result of the requested match will be used for controlling parts of, or 
the complete content of a service provided by the online service provider 108, or 
more specific, be used to target information or advertisement given the result from 
the requested match. 

20 The invention will as described so far only be able to identify an individual 

Internet user 109 defined as being the holder of an Internet subscription. This in- 
troduces a problem to identify the physical individual who is actually using the 
Internet connection N and requesting services A. For example, several members 
in a family may use one computer, one modem, one telephone line and one Inter- 

25 net subscription for all their Internet usage. 

To improve the quality and the possibility to target information in more 
detail, a small piece of software enables the physical Internet user to select be- 
tween different profiles (eViduals). These profiles are stored in said storage device 
102; 104 in the same way as information in the already described examples. Each 

30 said profile has an own identity. The software communicates the currently selected 
eViduals to the server (101 or 103). 

There is also a device (specifically a web-site) enabling physical Internet 
users to maintain their eVidual profile. This device also enables physical Internet 
users to select their eVidual regardless of their present location. The facility for 
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physical Internet users to maintain their eVidual profiles permits the QualityAds 
Network to reiay user defined data to online service providers 108 on demand- 
On usage of this is that online service providers 1 08 will be able to per- 
sonalize content and appearance to suit Internet users 109 based on individual 
5 preferences. Another possible use is to provide automated log-in-procedures to 
services provided by online service providers 108. 

Not described in the drawings is the possibility for online service providers 
108 to let Internet users 109 interact with servers (101 or 103). This interaction can 
be used to provide a possibility for an Internet user 109 to give feedback to an ac- 

io tin taken by the online service provider given the result m or a request B to server 
(101 or 103). The feedback from an Internet user 109 is stored in storage (102 or 
104) in order to improve the quality of future requests B to server (101 or 103). 
The feedback can be handled in real time. In this scenario the Internet user 109 
acts as an information supplier 107. 

15 In figure 8 there is disclosed a schematic diagram of some computer pro- 
gram products according to the present invention. There is disclosed n different 
digital computer 100i, 100 n , wherein n is an integer. There is also disclosed n 
different computer program products 102i, ... , 102 n , here showed in the form of 
compact discs. The different computer program products 102i 102 n are di- 

20 rectly loadable into the internal memory of the different digital computers 100 1t ... , 
100 n . Each computer program product 102i, .... 102 n , comprises software code 
portions for performing some or all the steps of figure 4 when the product(s) 102i, 

102 n is/are run on said computer(s) 100i, 100 n . Said computer program 
products 102i, 102 n , can e.g. be in the form of floppy disks, RAM disks, mag- 

25 netic tapes, opto magnetic disks or any other suitable products. 

The invention is not limited to the embodiments described in the foregoing. 
It will be obvious that many different modifications are possible within the scope of 
the following claims. 



30 
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CLAIMS 

1 . A system operable to identify and access information about a user (109) of 
a distributed communication system in real time without the users intervention, 

5 wherein the system comprises at least one service device (108) operable to pro- 
vide services to said user (109), at least one access device (105a) operable to 
provide access to said distributed communication system, characterized in that 
said system also comprises at least one control means (101; 103) connected to 
said at least one access device (105a) and to said at least one service device 

io (108), a to said at least one access device (105a) connected identification device 
(113) operable to identifying an address of a specific user, at least one storage 
device (102; 104) connected to said at least one control means (101; 103), and a 
to said at least one control means (101; 103) connected cache means (111) oper- 
able to store mappings of said addresses and identifications for said users (109), 

15 wherein said service device (108) sends a request for information about a user re- 
questing a service from said service device (108) to said control means (101: 103), 
which control means (101; 103) checks if said cache means contains an up to date 
identification, and if said check gives an affirmative answer said control means 
(101; 103) fetches said information from said storage device (102; 104) and sends 

20 a reply comprising said information to said service device (108), or if said check 
gives a negative answer said control means (101 ; 1 03) sends a request for a real 
time identification of said address to said access device (105a), which access de- 
vice (105a) identifies said address with the aid of said identification device (113) 
and sends said identification to said control means (101; 103), which control 

25 means (101 ; 103) fetches said information from said storage device (102; 104) 
and sends a reply comprising said information to said service device (108). 

2. A system operable to identify and access information about a user (109) of 
a distributed communication system according to Claim 1 , characterized in that 

30 said system is divided into a number of geographical regions based on the dis- 
tance between different geographical regions. 

3. A system operable to identify and access information about a user (109) of 
a distributed communication system according to Claim 2, characterized in that 
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said distance is measured by the delay between individual control means (101; 
103) in said system. 



4. A system operable to identify and access information about a user (109) of 
s a distributed communication system according to any one of Claims 2-3, char- 
acterized in that each geographical region comprises a central control means 
(101), a central storage device (102), and in that each geographical region can 
comprise at least one regional control means (103), at least on e regional storage 
device (104), and at least one access device (105a). 

10 

5. A system operable to identify and access information about a user (109) of 
a distributed communication system according to Claim 4, characterized in that 
each geographical region also can comprise a supplier means (106a) operable to 
distribute information, and at least one attach means (107a) operable to attach 

is additional information to identifications, wherein said supplier means (106a) is 
connected to said at least one access device (105a) and to said at least one at- 
tach means (107a). 

6. A system operable to identify and access information about a user (109) of 
20 a distributed communication system according to any one of Claims 1-5, charac- 
terized in that each service device (108) is connected to a first interface unit 
(110), which in turn is connected to said at least one control means (101 ; 103), in 
that each control means (101; 103) is connected to a second interface unit (1 12), 
which in turn is connected to said at least one access device (105a), and in that 

25 each control means (101 ; 103) also is connected to said at least one storage de- 
vice (102; 104). 

7. A system operable to identity and access information about a user (109) of 
a distributed communication system according to any one of Claims 1-6, charac- 

30 terized in that said distributed communication system is the Internet. 



8. A system operable to identity and access information about a user (109) 
of a distributed communication system according to any one of Claims 1-7, 
characterized in that each service device (108) is an online service provider 
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(108), each access device (105a) is an Internet access provider (105a), and each 
control means (101; 103) is a server (101; 103). 

9. A system operable to identify and access information about a user (109) of 
5 a distributed communication system according to any one of Claims 5-8, charac- 
terized in that each supplier means (106a) is a first supplier server (106a), and 
each attach means (107a) is a second supplier server (107a). 

10. A system operable to identify and access information about a user (109) of 
10 a distributed communication system according to any one of Claims 7- 9, charac- 
terized in that said address of a user (109) is an IP-address. 



11. A method for identifying and accessing information about a user (1 09) of a 
distributed communication system in real time without the users intervention, 
is wherein said method is performed with the aid of a system comprising at least one 
service device (108) operable to provide services to said user (109), and at least 
one access device (105a) operable to provide access to said distributed communi- 
cation system, said method comprises the steps of: 

- that a user (109) requests a service (A), implicitly of explicitly, from a service 
20 device (108); 

- that said service device (108) sends a request for additional information about 
said user (109) to a control means (101; 103); 

- said control means (101, 1 03) checks if a cache means (111) connected to 
said control means (101; 103) contains an up to date identification; 

25 - if said check gives an affirmative answer said control means (101 ; 103) fetches 
said information from a to said control means (101; 103) connected storage 
device (102; 104) and sends a reply comprising said information to said service 
device (108); or 

- if said check gives a negative answer said control means (101 , 103) sends a 
30 request for a real time identification of an address of said user (109) to said ac- 
cess device (105a); 

- said access device (105a) identifies said address with the aid of a to said ac- 
cess device (105a) connected identification device (1 13), and sends said iden- 
tification to said control means (101; 103); 



WO 01/75558 £^ PCT/SE00/00641 



said control means (101; 103) fetches said information from a to said control 
means (101; 103) connected storage device (102; 104), and sends a reply 
comprising said information to said service device (108). 



5 12. A method for identifying and accessing information about a user (1 09) of a 
distributed communication system according to Claim 1 1 , characterized in that 
said system also comprises a to said each service device (108) connected, first 
interface unit (110), and a to said each control means (101; 103) connected, sec- 
ond interface unit (112), wherein the method also comprises the following steps: 
10 - said request sent from said service device (108) is forwarded by said first in- 
terface unit (110), which first interface unit (110) decides which control means 
(101; 103) to send said request to; and 
- said request sent from said control means (101 ; 103) for a real time identifica- 
tion of an address of said user (109) is forwarded by said second interface unit 
15 (112) which selects which access device (105a) to send said request to. 



13. A method for identification and accessing information about a user (109) of 
a distributed communication system according to any one of Claims 11 — 12, 
characterized in that said system is divided into a number of geographical re- 
20 gions based on the distance between different geographical regions. 



14. A method for identification and accessing information about a user (109) of 
a distributed communication system according to Claim 13, characterized in that 
said distance is measured by the delay between individual control means (101; 

25 1 03) in said system. 

15. A method for identification and accessing information about a user (1 09) of 
a distributed communication system according to any one of Claims 13 — 14, 
characterized in that each geographical region comprises a central control means 

30 (101), a central storage device (102), and in that each geographical region can 
comprise at least one regional control means (103), at least one regional storage 
device (104), at least one access device (105a), a supplier means (106a) operable 
to distribute information, and at least one attach means (107a) operable to attach 
additional information to identifications, wherein said supplier means (106a) is 
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connected to said at least one access device (105a) and to said at least one at- 
tach means (107a). 



16. A method for identification and accessing information about a user (109) of 
5 a distributed communication system according to any one of Claims 11 - 15, 

characterized in that said method also comprises the following steps: 

- said control means (101; 103) updates said cache means (111) with a mapping 
between said address and an identification for each said request forwarded by 
said first interface unit (110); 

10 - said control means (101; 103) receives a mapping between said address and 
said identification by querying said access device (105a), or directly from an- 
other control means (101; 103); 

- said control means (101; 103) stores said mapping together with a time stamp 
in an internal cache means (111); 

15 - said control means (101; 103) iterates through the currently stored mappings 
between said address and said identification in said internal cache means 
(1 1 1 ) if a predetermined time has elapsed since the stored time stamp for said 
entry; and 

- if said address is invalid, which is verified by querying said access device 105a, 
20 said entry in said internal cache means (1 1 1 ) is removed; or 

- if said address is valid, which is verified by querying said access device 105a, 
said entry is updated with a new time stamp. 

17. A method for identification and accessing information about a user (109) of 
25 a distributed communication system according to any one of Claimsl 5-16, char- 
acterized in that said method also comprises the following steps: 

- said central control means (101 ), within a first geographical region, downloads 
mappings between access account information and an identifier from said ac- 
cess device (105a), which mapping data is stored in said central storage de- 

30 vice (1 02) within said first geographical region; 

- said supplier means (106a) within said first geographical region downloads 
mappings between access account information and an identifier from said ac- 
cess device (105a) within said first geographical region; 
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- said supplier means (106a) within said first geographical region distributes said 
information and identifier to said attach means (107a) in said first region, which 
attach means (107a) attach additional information to said identifier; 

- said attach means (107a) in said first region sends the new total information 
5 and identifier to said central control means (101 ) within said first region; and 

- said new total information and identifier are stored in said central storage de- 
vice (102) in said first region. 

18. A method for identification and accessing information about a user (109) of 
in a distributed communication system according to Claim 17, characterized in that 

said method also comprises the steps of: 

- said central control means (101) distributes said mapping data to said regional 
control means (103); and 

- said mapping data are stored in said regional storage device (104). 

15 

19. A method for identification and accessing information about a user (109) of 
a distributed communication system according to any one of Claims 15-18, 
characterized in that said method also comprises the steps of: 

- said central control means (101) in said first region distributes said mapping 
20 data to central control means (101 ) in another geographical region if there are 

service devices (108) requesting said information from said regional control 
means (103) or said central control means (101 ) in another region than said 
first region; and 

- said mappings data are stored in said central storage device (102) in said an- 
25 other region. 

20. A method for identification and accessing information about a user (109) of 
a distributed communication system according to any one of Claims 15-19, 
characterized in that said method also comprises the steps of: 

30 - said central control means (101 ) in said first region distributes said mapping 
data to regional control means (1 03) in other geographical regions if there are 
service devices (108) in another region than said first region requesting said 
information from sad regional control means (103). 
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21 . A method for identification and accessing information about a user (109) of 
a distributed communication system according to any one of Claims 15-20, 
characterized in that said method also comprises the step of: 
- that said user (109) can interact with said control means (101 ; 103). 

5 22. A method for identification and accessing information about a user (109) of 
a distributed communication system according to Claim 12, characterized in that 
said interaction is comprised of said user (109) is giving feedback to an action 
taken by said service device (108), wherein said feedback is stored in said storage 
device (102; 104). 

10 23. A method for identification and accessing information about a user (109) of 
a distributed communication system according to any one of Claims 11 - 22, 
characterized in that said distributed communication system is the Internet. 

24. A method for identification and accessing information about a user (109) of 
a distributed communication system according to any one of Claims 11 - 23, 

15 characterized in that each service device (108) is an online service provider 
(108), each access device (105a) is an Internet access provider (105a), and each 
control means (101; 103) is a server (101; 103). 

25. A method for identification and accessing information about a user (109) of 
a distributed communication system according to any one of Claims 15-24, 

20 characterized in that each supplier means (1 06a) is a first supplier server (106a), 
and each attach means (107a) is a second supplier server (107a). 

26. A method for identification and accessing information about a user (1 09) of 
a distributed communication system according to any one of Claims 15-25 char- 
acterized in that said address of a user (109) is an IP-address. 

25 27. At least one computer program product (102i, .... 102 n ) directly loadable 
into the internal memory of at least one digital computer (lOd, .... 100 n ), compris- 
ing software code portions for performing the steps of claim 1 1 when said at least 
one product (102i, 102 n ) is/are run on said at least one computer (100 1( .... 
100„). 
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